[solved] [SVS] SSO - User information

The windows auth is able to return the username, domain and the wingroups of the authenticating user.
We'd like to populate the fields (e-mail/fullname and so on) which are not automatically filled in for the user object.

How would I go on about this?

Sure I could write into the OnWindowsUserAuthorize Event to get it from the LDAP,
but wouldn't that be redundant since the information for the mentioned fields are already queried beforehand?
Also, how would I write informations into the related user object to the authenticating user since the function only returns these 3 fields?

I guess this would be possible to use the ldap_* PHP functions after the authentication (meaning, after the DOMAIN\user was created) to get the relevant information and store it on the #_USER_USER_PROPERTIES cube...

I am using the OnWindowsUserAuthorize Event of the SEPEventHandler.
Theres not much to the changes I made, since I do not wan't to create an ldap group and join the user each time
we create a new one, I simply return the Domain\Username as group instead of the wingroups.

How to retrieve the Information might be the easier part here, maybe you could point me in the right direction on the "write to the cube" side?
Also I am considering to do this each time they authenticate since there is this slight chance something changes on their User Object in the AD.

edit: maybe there is a samplescript I overlooked somewhere, displaying an example read/write in php to the cube?

can you please post your php script cause I don't see yet what you've changed in the onWindowsAuthorize event.

reading a cell in a cube would be no problem, but writing would be one. basically you can only write using the init-worker event cause this is the only one that ensure an exclusive access (the "palo_lock_area" function - see sep_inc_on_cell_change.php"). the auth event do not provide this possibilty.

You'll have to trick using a SOAP call in the PHP script. This SOAP call would then trigger an ETL job that updates the cell in the cube accordingly. This is rather simple

This is me overthinking now and then.
I simply created an ETL Job that fills email and fullname of the #_USERS_ that match the DOMAIN\Users with values from the LDAP
way easier and it's not going to trigger each time someone connects.